correct
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external repository data such as commit messages, review comments, and existing agent instruction files. This data could potentially contain malicious instructions intended to manipulate the agent's behavior during the correction process.
- Ingestion points: Directives in SKILL.md to read commits, reverts, review comments, and agent instruction files.
- Boundary markers: Absent; there are no instructions to delimit or ignore instructions within the ingested data.
- Capability inventory: The skill is intended to perform repository-wide changes, including modifying architecture, source code types, and CI configurations.
- Sanitization: Absent; the skill does not define methods for sanitizing or validating ingested content before processing.
Audit Metadata